(#13560) OUTPUT is a valid chain for the mangle table

diff --git a/lib/puppet/type/firewall.rb b/lib/puppet/type/firewall.rb
index 7d9865a324db03e737d9d33a4f8ffa139a01e37c..9d06e48fbe9893a084eb7e4ee79d247665b0c4e8 100644 (file)
--- a/lib/puppet/type/firewall.rb
+++ b/lib/puppet/type/firewall.rb
@@ -572,10 +572,10 @@ Puppet::Type.newtype(:firewall) do
 
     if value(:set_mark)
       unless value(:jump).to_s  =~ /MARK/ &&
-             value(:chain).to_s =~ /PREROUTING/ &&
+             value(:chain).to_s =~ /PREROUTING|OUTPUT/ &&
              value(:table).to_s =~ /mangle/
         self.fail "Parameter set_mark only applies to " \
-          "the PREROUTING chain of the mangle table and when jump => MARK"
+          "the PREROUTING or OUTPUT chain of the mangle table and when jump => MARK"
       end
     end